Security Engineer

• Diseñar e implementar arquitecturas integrales de seguridad usando IAM, VPC y cifrado de datos en tránsito y reposo
• Gestionar la seguridad de red y perímetro mediante AWS VPC, Security Groups, AWS WAF, AWS Shield y AWS Network Firewall
• Optimizar la entrega segura de contenido con Amazon CloudFront e implementar APIs seguras con Amazon API Gateway
• Desplegar y gestionar instancias EC2, optimizando costos y rendimiento con Spot Instances y Reserved Instances
• Configurar soluciones serverless con AWS Lambda y diseñar alta disponibilidad, recuperación ante desastres y tolerancia a fallos
• Diseñar arquitecturas escalables con Elastic Load Balancing y Auto Scaling Groups
• Desarrollar módulos y plantillas de infraestructura como código con Terraform y CloudFormation
• Integrar seguridad en pipelines CI/CD mediante AWS CodePipeline, análisis estático, escaneo de vulnerabilidades y pruebas de penetración
• Realizar modelado de amenazas y evaluación de riesgos, y educar a equipos de desarrollo y DevOps
• Automatizar políticas de seguridad y respuestas ante incidentes con AWS Lambda y AWS Systems Manager
• Configurar métricas, alarmas, registros y trazabilidad con CloudWatch y AWS X-Ray
• Evaluar requisitos regulatorios como HIPAA, PCI DSS y SOC 2 y asegurar la conformidad de AWS
• Auditar continuamente entornos con CloudTrail, AWS Config y AWS Security Hub
• Generar informes de cumplimiento, remediar brechas de seguridad y participar en mesas de diseño de aplicaciones
• Crear Runbooks, diagramas de arquitectura e informes post-mortem con análisis de causa raíz

Cloud Specialist – Security SSR

• Own the technical security posture of production AI systems, including infrastructure, pipelines, and agents
• Harden cloud infrastructure, APIs, internal tooling, and CI/CD pipelines through encryption, secrets management, logging, and access controls
• Conduct vulnerability scanning, penetration testing, adversarial testing, threat modeling, and manual security reviews
• Drive vulnerability remediation through closure
• Secure AI and agentic systems against prompt injection, adversarial inputs, unauthorized actions, unsafe outputs, and data leakage
• Monitor production AI systems for anomalies, abuse attempts, and unsafe decisions
• Own Azumo's automated security, cost, and architecture audit across client codebases
• Build alerting and detection, investigate incidents, and lead containment, remediation, root-cause analysis, and preventative changes
• Maintain operational visibility into access patterns and security events
• Handle security questionnaires, vendor risk assessments, enterprise RFPs, and technical security discussions with clients
• Conduct architecture reviews and promote secure development practices with engineering, Product, Compliance, and Operations
• Work within client repositories, tooling, and compliance reviews, including engagements with HIPAA requirements

Senior Security Engineer

• Support the Enterprise AI Security Program
• Help ensure the safe and secure adoption of AI across internal chatbots, agentic workflows with tool access, code assistants, and agentic platforms
• Assess new AI tools and protocols by analyzing their architecture, trust boundaries, and authentication models
• Develop specific and testable security policies
• Translate security policies into automated enforcement through policy-as-code, CI/CD gates, gateway-level controls, and DLP rules
• Evaluate and address AI/LLM security risks, including prompt injection, unsafe outputs, tool-use abuse, data leakage, identity misuse, and agentic workflow escalation
• Provide defensible security opinions on new tools, protocols, and frameworks within days
• Turn vendor capability gaps and new tool risk profiles into implementable and testable control requirements
• Discover and govern shadow-AI/BYOAI usage at scale
• Support detection engineering, SIEM integration, and telemetry design for AI and agent behavior

AI Security Engineer – AI, Agentic Security

• Own the technical security posture of production AI systems, including infrastructure, pipelines, and agents
• Harden cloud infrastructure, APIs, internal tooling, and CI/CD pipelines through encryption, secrets management, logging, and access controls
• Conduct vulnerability scanning, penetration testing, adversarial testing, threat modeling, and manual security reviews
• Drive vulnerability remediation through closure
• Build prompt-injection defenses, adversarial-input testing, and guardrails for tool-calling and agentic AI systems
• Monitor production AI systems for anomalies, abuse attempts, and unsafe decisions
• Own the automated security, cost, and architecture audit across client codebases
• Implement alerting and detection, investigate incidents, and lead containment, root-cause analysis, remediation, and prevention
• Maintain operational visibility into access patterns and security events
• Handle security questionnaires, vendor risk assessments, enterprise RFPs, and direct technical discussions with clients
• Conduct architecture reviews and establish secure development patterns with engineering, Product, Compliance, and Operations
• Work within client repositories, tooling, and compliance reviews, including engagements with requirements such as HIPAA

• Coordinar el proceso de Product Security desde el inicio de una iniciativa hasta su salida a producción
• Facilitar sesiones de Threat Modeling junto a equipos de Producto, Arquitectura y Tecnología, transformando amenazas en controles y requerimientos accionables
• Gestionar evaluaciones de seguridad sobre proveedores, partners y servicios externos (TPRM)
• Analizar documentación técnica, arquitecturas, resultados de pentests y evidencias de seguridad para contribuir a la evaluación integral del riesgo
• Participar en la definición y ejecución de gates de seguridad previos al lanzamiento de productos e iniciativas
• Dar seguimiento a los distintos actores involucrados en el framework, impulsando avances y asegurando el cumplimiento de los plazos definidos
• Colaborar en la evolución continua del Product Security Framework de Prex
• Generar visibilidad sobre riesgos, cobertura y estado de las iniciativas mediante dashboards y métricas de seguimiento
• Trabajar equilibrando seguridad, negocio y experiencia de usuario, evitando convertirse en un cuello de botella para los equipos

Product Security Specialist

• Own the technical security posture of production AI systems, including infrastructure, pipelines, and agents
• Harden cloud infrastructure, APIs, internal tooling, and CI/CD pipelines through encryption, secrets management, logging, and access controls
• Conduct scanning, penetration testing, adversarial testing, threat modeling, and manual security reviews
• Drive vulnerability remediation through closure
• Defend AI and agentic systems against prompt injection and adversarial inputs
• Build guardrails for tool-calling and agentic systems that are bounded, observable, auditable, and safe to fail
• Own the automated security, cost, and architecture audit across client codebases
• Configure audit checks, severity grading, frequency, and accuracy
• Implement monitoring and detection, investigate anomalies, and perform root-cause analysis
• Run incident response, including containment and fixes to prevent recurrence
• Work within client repositories, tooling, and compliance reviews such as HIPAA

Senior Security Engineer – Platforms & AI

• Design and implement security controls across cloud, infrastructure, and internal platforms
• Partner with engineering to harden cloud architecture, IAM, and infrastructure
• Own product security reviews for new features, services, and major architecture changes
• Drive threat modeling and secure design decisions early in the SDLC
• Operate and improve AppSec workflows (SAST, SCA, secrets scanning, IaC scanning)
• Triage vulnerabilities across application, container, and cloud findings, and drive remediation with risk-based SLAs
• Define and run the vulnerability management lifecycle: intake, prioritization, exception handling, validation, and reporting
• Improve CNAPP coverage and finding quality across cloud accounts and workloads
• Improve Kubernetes and container security posture
• Monitor, investigate, and respond to security events and incidents
• Build automation to improve security operations, access workflows, and incident response
• Support wider teams by providing timezone coverage for the fully remote organization